Skip to content
PluginCanary

Contact Form by Supsystic

Contact Form by Supsystic - Drag & Drop Form Builder with Templates & Form Statistics
by supsystic · 6,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 30 Oct 2026, 17 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Contact Form by Supsystic
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Contact Form by Supsystic still maintained?
Yes. Last release 30 Oct 2026, 17 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns Contact Form by Supsystic, and has it changed hands?
No change recorded. Main committer supsystic.com since May 2016. 3 Nov 2026 · SVN log
Was Contact Form by Supsystic removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Contact Form by Supsystic safe?
18 known vulnerabilities, all fixed (latest in 1.10.7). Not on the exploited list. 26 Oct 2026 · Wordfence Intelligence
Is the latest Contact Form by Supsystic update safe to install?
No ownership change before 1.11.2. No one-star spike after it. 30 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
supsystic.com17 May 2016 to 30 Oct 2026, 140 commits

1 committer recorded. No ownership change since 2016.

Maintenance

Last release
5 days ago
Releases, 24 months
17
Tested up to
7.1 current
Requires PHP
7.3 supported 8.2+
Releases per quarter
Releases per quarter for Contact Form by Supsystic
Q1 20241
Q2 20240
Q3 20240
Q4 20241
Q1 20250
Q2 20255
Q3 20250
Q4 20251
Q1 20261
Q2 20261
Q3 20265
Q4 20264

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Rating distribution
5 star80
4 star4
3 star3
2 star1
1 star4

Security record

11 vulnerabilities in 24 months (18 on record), all patched (latest fixed in 1.10.7).

Show 18 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
26 Oct 2026Contact Form by Supsystic - Drag & Drop Form Builder with Templates & Form Statistics <= 1.10.5 - Unauthenticated Information Exposure5.3<= 1.10.51.10.7Patched before disclosure
26 Oct 2026Contact Form by Supsystic - Drag & Drop Form Builder with Templates & Form Statistics <= 1.10.7 - Missing Authorization5.3<= 1.10.71.11.1Patched before disclosure
26 Oct 2026Contact Form by Supsystic <= 1.11.0 - Authenticated (Administrator+) Remote Code Execution7.2<= 1.11.01.11.1Patched before disclosure
26 Oct 2026Contact Form by Supsystic <= 1.11.0 - Missing Authorization5.3<= 1.11.01.11.1Patched before disclosure
23 Oct 2026Contact Form by Supsystic <= 1.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.7.01.8.0Patched before disclosure
4 Sep 2026Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header7.2<= 1.10.21.10.3Patched before disclosure
18 Aug 2026Contact Form by Supsystic < 1.10.0 - Unauthenticated Payment Bypass5.3< 1.10.01.10.0Patched before disclosure
18 Aug 2026Contact Form by Supsystic < 1.10.0 - Unauthenticated Stored Cross-Site Scripting7.2< 1.10.01.10.0Patched before disclosure
30 Mar 2026Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality9.8<= 1.7.361.8.0Patched before disclosure
18 Aug 2025Contact Form by Supsystic <= 1.7.36 - Reflected Cross-Site Scripting6.1<= 1.7.361.8.0221
15 Apr 2025Contact Form by Supsystic <= 1.7.29 - Cross-Site Request Forgery to Stored Cross-Site Scripting via saveAsCopy AJAX Action6.1<= 1.7.291.7.30Patched before disclosure
14 Oct 2024Contact Form by Supsystic <= 1.7.28 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4<= 1.7.281.7.29Patched before disclosure
13 Oct 2024Contact Form by Supsystic <= 1.7.28 - Authenticated (Admin+) Remote Code Execution7.2<= 1.7.281.7.29Patched before disclosure
3 Oct 2023Contact Form by Supsystic <= 1.7.27 - Cross-Site Request Forgery4.3<= 1.7.271.7.28165
16 May 2023Contact Form by Supsystic <= 1.7.24 - Cross-Site Request Forgery via AJAX action5.4<= 1.7.241.7.25Patched before disclosure
28 Oct 2021Contact Form by Supsystic < 1.7.20 - Authenticated (Admin+) Stored Cross-Site Scripting5.5< 1.7.201.7.208
19 Apr 2021Contact Form by Supsystic <= 1.7.14 - Reflected Cross-Site scripting6.1<= 1.7.141.7.15Patched before disclosure
8 Feb 2021Contact Form by Supsystic <= 1.7.10 - SQL Injections8.8<= 1.7.101.7.1111

Changelog mentions of security fixes: 1.8.2 (security, vulnerability, XSS, nonce); 1.10.0 (security); 1.10.2 (security); 1.10.3 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

6,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Contact Form by Supsystic
4 May 2026105
11 May 2026312
18 May 2026365
25 May 20261,699
1 Jun 2026755
8 Jun 2026404
15 Jun 2026305
22 Jun 2026281
29 Jun 2026291
6 Jul 2026428
13 Jul 2026279
20 Jul 2026305
27 Jul 20262,165
3 Aug 2026588
10 Aug 20262,806
17 Aug 2026572
24 Aug 2026442
31 Aug 20262,133
7 Sep 2026586
14 Sep 20262,101
21 Sep 2026725
28 Sep 2026499
5 Oct 20262,094
12 Oct 20262,297
19 Oct 20262,515
26 Oct 20262,689
2 Nov 2026160

Weekly downloads over the last 4 weeks are 85% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Online FormsScore 100 · 20,000+Zoho FormsScore 100 · 10,000+RTMFormScore 98 · 30,000+WPZOOM FormsScore 98 · 10,000+FormLayerScore 96 · 100,000+

Facts

Version1.11.2
Authorsupsystic
Added17 May 2016
Last updated30 Oct 2026
Active installs6,000+
Requires WordPressnot stated
Tested up to7.1.4
Requires PHP7.3
CategoryForms & Data Collection > Form Builders & Creators
Tagscustom form, contact form, form builder, form statistics, contact form builder

Other plugins by this author: Photo Gallery by Supsystic - Image Gallery, Masonry, Albums & Lightbox, Easy Google Maps by Supsystic - Custom Markers, Clustering & Map Themes, Pricing Table by Supsystic - Responsive Pricing Plans & Comparison Tables, Ultimate Maps by Supsystic - OpenStreetMap, Leaflet & Mapbox, No API Key, Data Tables Generator by Supsystic - Excel-like, WooCommerce & Pricing Tables, Customer Engagement System - Popup Builder, Forms, CRM & Email Marketing Automation

Questions

Is Contact Form by Supsystic still maintained?

Yes. Last release 30 Oct 2026, 17 releases in the last 24 months.

Who owns Contact Form by Supsystic, and has it changed hands?

No change recorded. Main committer supsystic.com since May 2016.

Was Contact Form by Supsystic removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Contact Form by Supsystic safe?

18 known vulnerabilities, all fixed (latest in 1.10.7). Not on the exploited list.

Is the latest Contact Form by Supsystic update safe to install?

No ownership change before 1.11.2. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue